(1)  I would  like  to  know  what  the  FBI's  guidelines  are  regarding  what  orders  are  required  for  the 
use  of  a stingray,  particularly  as  it  pertains  to  location  information.  Do  they  require  a search 
warrant  or  a different  type  of  order?  Are  agents  instructed  to  try  to  get  a warrant  if  possible  but  a 
lesser  order  if  not?  What  is  the  legal  analysis  that  supports  this  policy? 

The  specific  equipment  used  by  law  enforcement  agencies  to  obtain  location  information  and  the 
capabilities  of  that  equipment  are  considered  Law  Enforcement  Sensitive,  since  its  public  release 
could  harm  law  enforcement  efforts  by  compromising  future  use  of  the  equipment.  As  a general 
matter,  the  type  of  information  obtained  with  location  identifying  techniques  is  dialing,  routing, 
addressing  or  signaling  information  that  has  historically  been  obtained  pursuant  to  the  Pen 
Register  Statute  (18  USC  section  2131  et  seq).  That  being  said,  Federal  Courts  are  split  on  what 
legal  authority  is  required  to  obtain  location  information  on  a prospective  basis.  Because  of  a 
prohibition  against  obtaining  this  information  solely  pursuant  to  a Pen  Register/Trap  and  Trace 
order  set  forth  in  the  Communications  Assistance  to  Law  Enforcement  Act  (CALEA,  see  47 
USC  1002),  some  District  Courts  require  what  has  come  to  be  known  as  a “hybrid”  approach 
whereby  a court  order  issued  pursuant  to  the  Pen  Register  Statute  (18  USC  section  3 121  et  seq) 
is  combined  with  what  is  known  as  a “2703(d)  order”  (reference  to  18  USC  2703(d),  part  of  the 
Stored  Communications  Act).  Other  District  Courts  have  held  a search  warrant  based  upon 
probable  cause  is  necessary  to  obtain  location  information  on  a prospective  basis. 

In  utilizing  this  equipment  and  data,  the  FBI  conducts  all  investigations  in  accordance  with  the 
Attorney  General  Guidelines  and  the  FBI's  Domestic  Investigations  and  Operations  Guide. 


(2)  Do  the  instructions  vary  by  region? 

Generally  speaking,  the  FBI  advises  our  field  offices  to  work  closely  with  the  relevant  U.S. 
Attorney’s  Office  to  adhere  to  the  legal  requirements  of  their  respective  District  as  set  forth  in 
case  law  or  court  decisions/precedent.  If  the  FBI  believes  the  use  of  any  technology  or  technique 
may  provide  information  on  an  individual  while  that  person  is  in  a location  where  he  or  she 
would  have  a reasonable  expectation  of  privacy,  it  is  FBI  policy  to  obtain  a search  warrant. 


(3)  I would  like  to  know  what  the  FBI  policy  is  regarding  data  from  stingrays  being  expunged.  In 
the  case  I'm  covering,  the  Agent,  in  the  application  for  the  use  of  device,  requested  that  data 
obtained  by  the  court  order  be  e^unged  at  the  end  of  the  mission  to  locate  the  celluiar  device. 
This  request  was  granted,  and  that  data  was  expunged. 

With  regard  to  the  expungement  of  location  information  obtained  through  use  of  this  type  of 
equipment  by  the  FBI,  our  policy  since  the  1990’s  has  been  to  purge  or  “expunge”  all 
information  obtained  during  a location  operation. 


(4)  USAGE  INFORMATION  - I would  like  any  information  that  the  FBI  might  be  able  to  provide 
on  how  helpful  these  "stingray"  type  devices  are,  how  frequently  they  are  used  and  whether 
their  use  has  increased  or  decreased  in  the  past  couple  of  years. 


Location  information  continues  to  be  a vital  component  in  law  enforcement  investigations  at  the 
federal,  state  and  local  levels.  All  levels  of  law  enforcement  need  to  maintain  the  ability  to 
utilize  location  information  pursuant  to  lawful  authority. 
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By  JENNIFER  VALENTINO-DEVRIES 

For  more  than  a year,  federal  authorities  pursued  a man  they  called  simply  "the  Hacker.”  Only 
after  using  a litUe  known  cellphone-tracking  device-^  stingray— were  they  able  to  zero  in  on  a 
Caiifbrnia  home  and  make  the  arrest 


Stingrays  are  designed  to  locate  a mobile 
phone  even  when  its  not  being  used  to  make 
a call.  The  Federal  Bureau  of  Investigation 
considers  the  devices  to  be  so  critical  that  It 
has  a policy  of  deleting  the  data  gathered  In 
th^r  use,  mainly  to  keep  suspects  In  the  dark 
about  their  capabilities,  an  FBI  official  fold 
The  WSII  Street  Journal  in  response  to 
inquiries. 


U.S.P*tant  and  Trademark  Office  . , 

A Hama  StIngRay  II.  onaof  ssueial  devfcas  dubbed  ^ 

stingrays.'  "Hacker”— Daniel  David  Rigmaiden— is 

shaping  up  as  a possible  test  of  the  l^el 
standards  for  using  these  devices  In 

investigations,  The  FBI  says  it  obtains  appropriate  court  approval  to  use  the  deince. 


http://online.wsj.eom/article/SBI0001424053111904194604576583  n2723197574.htinl  9/26/2011 
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Stingrays  are  one  of  several  new  technologies  used  by  law  enforcement  to  track  people’s 
locations,  often  vnthout  a search  warrant.  These  techniques  are  diiving  a constitutional  debate 
about  whether  tile  Fourth  Amendment,  which  prohibits  unreasonable  searches  and  seizures,  but 
which  was  written  before  the  digital  age,  is  keeping  pace  with  the  times. 

On  Nov.  8,  the  Supreme  Court  will  hear  arguments  over  whether  or  not  police  need  a warrant 
before  secretiy  installing  a GPS  device  on  a suspect’s  car  and  tracking  him  for  an  extended 
period.  In  both  the  Senate  and  House,  new  bills  would  require  a warrant  before  tracking  a 
cellphone's  location. 

And  on  Thursday  in  U.S.  District  Court  of 
Arizona,  Judge  David  G.  Campbell  is  set  to  * 
hear  a request  by  Mr.  Rigmaiden,  who  is  . 
facing  fraud  charges,  to  have  information 
about  the  government's  secret  techniques 
disclosed  to  him  so  he  can  use  it  in  his 


More 

Key  Documents  in  'Stingray'  Case 
Digits:  How  'Stingray'  Devices  Work 

Digits:  How  Technology  Is  Testing  the  Fourth 
Amendment 


Device  allows  tracking  when  phone  is  not 
in  use,  reports  Valentino-D-evriss 


defense.  Mr.  Rigmaiden  maintains  his 
innocence  and  says  that  using  stingrays  to 
locate  devices  in  homes  without  a valid 
warrant  "disregards  the  United  States 
Constitution"  and  is  illegal. 

His  argument  has  caught  the  judge's 
attention.  In  a February  hearing,  according  to 
a transcript,  Judge  Campbell  asked  the 
prosecutor,  'Were  there  warrants  obtained  in 


connection  vidth  the  use  of  this  device?" 
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The  prosecutor,  Frederick  A.  Battista,  said  the 
government  obtained  a "court  order  that 
satisfied  [the]  language"  in  the  federal  law  on 
warrants.  The  judge  then  asked  how  an  order 
or  wairant  could  have  been  obtained  witiiout 
telling  the  judge  what  technology  was  being 
used.  Mr.  Battista  said:  "it  was  a standard 
practice,  your  honor." 


DOW  JONES  NEWS  SERVICE 

Tech  Giants  Seek  to  Clamp  Down  on  Multi- 
Tenteded  Patent  Suits 

^cess  thousands  of  buslifc^  sources  not  avaUable  on 
the  tee  web.  Learn  More 


Judge  Campbell  responded  that  It  "can  be 
litigated  whether  those  orders  were 
appropriate.” 

On  Thursday  the  government  will  argue  it 
should  be  ^le  to  withhold  details  about  the 


tool  used  to  locate  Mr.  Rigmaiden,  according  to  documents  filed  by  the  prosecution.  In  a 
statement  to  the  Journal,  Sherry  Sabol,  Chief  of  tire  Science  & Technology  Office  for  the  FBI's 
Office  of  General  Counsel,  says  that  infomriation  about  stingrays  and  r^ted  tochnology  is 
"considered  Law  Enforcement  Sensitive,  since  its  public  release  could  harm  law  enforcement 
effarte  by  compromising  future  use  of  the  equipment." 
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^ The  prosecutor,  Mr.  Battista,  told  tee  judpe 

^ that  the  government  worries  that  disclosure 

"!:r  ■ ~ ~ ' defeated  or  avoided  or  detected." 

TSIaege  imager ' ' 

A stingray  works  by  mimicking  a cellphone  ...  . 

tower,  getting  a f^one  to  connect  to  it  and  measuring  signals  from  the  phone.  It  lets  the  stingray  ^ T1 

operator  "ping,"  or  send  a signal  to,  a phone  and  locate  it  as  long  as  it  is  powered  on,  according 

to  documents  reviewed  by  the  Journal.  The  device  has  various  uses,  Including  helping  police 

locate  suspects  and  aiding  search-and-rescue  teams  in  finding  people,  lost  In  remote  areas  or  ® your 

buried  in  rubble  after  an  accident  a*™™** 

Most  Poi 

The  government  says  "stingray"  is  a generic  term.  In  Mr.  Rigmaiden's  case  it  remains  unclear 

which  device  or  devices  were  actually  used.  Gioupon  U: 

Samsung  St 

The  best  known  stingray  maker  is  Florida-based  defense  contractor  Harris  Corp.  A spokesman 

for  Ham's  declined  to  comment.  Emploj^^ 

Remote  Act 

Harris  holds  trademarks  registered  between  2002  and  2008  on  several  devices,  including  the 

StingRay,  StingRay  II,  AmberJack,  KingFish,  TriggerFish  and  LoggerHead.  Similar  devices  are  Spnnt  to  Gt 

available  from  other  manufacturers.  According  to  a Harris  document,  its  devices  are  sold  only  to 
law-enforcement  and  government  agencies. 

GetunRmil 

Some  of  the  gadgets  look  surprisingly  old-fashioned,  with  a smattering  of  switches  and  tights  y|lQ  yy^| ' 

scattered  across  a panel  roughly  the  size  of  a shoebox,  according  to  photos  of  a Harris-made  ^ ^ 

StingRay  reviewed  by  the  Journal.  The  devices  can  be  carried  by  hand  or  mounted  in  cars,  w 

allowing  investigators  to  move  around  quickly.  ineisiiiw  co 

A rare  public  reference  to  this  type  of  technology  appeared  this  summer  in  the  television  crime 
drama  'The  Closer."  In  the  episode,  law-enforcement  officers  use  a gadget  they  called  a "catfish" 

to  track  cellphones  without  a court  order.  Most 

The  U.S.  armed  forces  also  use  stingrays  or  simitar  devices,  according  to  public  contract  notices. 
> Local  law  enforcement  in  Minnesota,  Arizona,  Miami  and  Durham,  N.C.,  also  either  possess  the 

devices  or  have  considered  buying  them,  according  to  interviews  and  published  requests  for 

The  sheriff's  department  In  Maricopa  County,  Ariz.,  uses  the  equipment  "about  on  a monthly 

basis,"  says  Sgt  Jesse  Spurgin.  'This  is  for  location  only.  We  can't  listen  in  on  conversations," 
he  says. 

Sat.  Souraln  savs  officers  often  ohtsln  court  orders,  but  not  neceesarilv  search  warrants,  when 

using  the  device:  To  obtain  a search  warrant  from  a court,  officers  as  a rule  need  to  show 

"probable  cause,"  which  is  generally  defined  as  a reasonable  belief,  based  on  factual  evidence, 

that  a crime  was  committed,  lesser  standards  apply  to  other  court  orders.  Theii< 

A spokeswoman  with  the  Bureau  of  Criminal  ^prehension  in  Minnesota  says  officers  don't  need  pTOhit 

to  seek  search  vrarrants  in  that  state  to  use  a mobile  tracking  device  because  it  does  not  _ ... 

Intercept  communication,  so  no  wiretap  laws  would  apply."  ^ 
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FBI  and  Department  of  Justice  officials  have  also  said  that  investigators  don't  need  seartdi 
vrarrants.  Associate  Deputy  Attorney  General  James  A.  Baker  and  FBI  General  Counsel  Valerie 
E.  Capront  both  said  at  a panel  at  the  Brookings  Institution  in  May  that  devices  like  these  fall  into 
■ a category  of  tools  called  "pen  registers,"  which  require  a lesser  order  than  a warrant.  Pen 
registers  gather  signals  from  phones,  such  as  phone  numbers  dialed,  but  don't  receive  the 
content  of  the  communications. 

To  get  a pen-register  order,  Investigators  don't  have  to  show  probable  cause.  The  Supreme 
Court  has  ruled  that  use  of  a pen  register  doesn't  require  a search  warrant  because  it  doesn't 
involve  interception  of  conversations. 

But  wito  cellphones,  date  sent  includes  location  information,  making  the  situation  more 
complicated  because  some  Judges  have  found  that  location  information  is  more  intrusive  than 
details  about  phone  numbers  dialed.  Some  courts  have  required  a slightly  higher  standard  for 
location  infbmiation,  but  not  a warrant,  while  others  have  held  that  a search  warrant  is 
necessary. 

The  prosecution  in  the  Rigmalden  case  says  in  court  documents  that  the  "decisions  are  made  on 
a case-by-case  basis"  by  magistrate  and  district  judges.  Court  records  in  other  cases  indicate 
that  decisions  are  mb(ec(,  and  cases  are  only  now  moving  through  appellate  courts.  ' 

The  FBI  advises  agents  to  work  with  federal  prosecutors  locally  to  meet  the  requirements  of  their 
particular  district  or  judge,  the  FBI's  Ms.  Sabol  says.  She  also  says  it  is  FBI  policy  to  obtain  a 
search  warrant  If  the  FBI  believes  the  technology  "may  provide  information  on  an  individual  while 
that  person  is  in  a location  where  he  or  she  would  have  a reasonable  expectation  of  privacy." 

Experts  say  lawmakers  and  the  courts  haven't  yet  settled  under  what  circumstances  locating  a 
person  or  device  constitutes  a search  requiring  a warrant.  Tracking  people  when  they  are  home 
is  particularly  sensitive  because  the  Fourth  Amendment  specifies  that  people  have  a right  to  be 
secure  against  unreasonable  searches  in  their  "houses." 

The  law  is  uncertain,"  says  Otin  Kerr,  a professor  at  George  Washington  University  Law  School 
and  tenner  computer-crime  attorney  at  the  Departinent  of  Justice.  Mr.  Kerr,  who  has  ai^ued  that 
warrants  should  be  required  for  some,  but  not  all,  types  of  location  data,  says  that  the  legality 
"should  depend  on  the  technology." 

. In  the  case  of  Mr.  Rigmaiden,  the  government  alleges  that  as  early  as  2005,  he  began  filing 
fraudulent  tax  returns  online.  Overall,  investigators  say,  Mr.  Rigmaiden  electronically  filed  more 
than  1,900  fraudulent  tax  returns  as  part  of  a $4  million  plot 

Federal  investigators-pay  they  pursued  Mr.  Rigmaiden  "through  a virtual  labyrinth  of  twists  and 
turns."  Eventually,  they  say  they  linked  Mr.  Rigmaiden  to  use  of  a mobile-broadband  card,  a 
device  that  lets  a computer  connect  to  the  Internet  through  a cellphone  network. 

Investigators  obtained  court  orders  to  hack  the  broadband  card.  Both  orders  remain  sealed,  but 
portions  of  tiiem  have  been  quoted  by  the  defense  and  the  prosecution. 

These  two  documents  are  central  to  the  clash  in  the  Arizona  courtroom.  One  authorize  a "pen 
register"  and  clearly  isnl  a search  warrant  The  other  document  is  more  complex  The 
prosecution  says  it  is  a type  of  search  warrant  and  that  a finding  of  probable  cause  was  made. 
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But  the  defense  argues  that  it  can't  be  a proper  search  warrant,  because  among  other  thlrtp  it 
allowed  investigators  to  delete  all  the  tracking  data  collected,  rather  than  reporting  back  to  the 
judge. 

Legal  experts  who  spoke  with  the  Journal  say  It  is  difficult  to  evaluate  the  order,  since  it  remains 
sealed.  In  general,  for  purposes  of  the  Fourth  Amendment,  the  finding  of  probable  cause  Is  most 
important  in  determining  whether  a search  is  reasonable  because  that  requirement  is  specified  in 
the  Constitution  Itself,  rather  than  In  legal  statutes,  says  Mr.  Kerr. 

But  It  is  "odd"  for  a search  warrant  to  allow  deletion  of  evidence  before  a case  goes  to  trial,  says 
Paul  Ohm,  a professor  at  the  University  of  Colorado  Law  School  and  a former  computer-crime 
attorney  at  the  Departmenf'of  Justice.  The  law  governing  search  warrants  specifies  how  the 
warranto  are  to  be  executed  and  generally  requires  information  to  be  returned  to  the  judge. 

Even  if  the  court  finds  the  government's  actions  acceptable  under  the  Fourth  Amendment, 
deleting  the  data  is  "still  something  we  might  not  want  the  FBI  doing,"  Mr.  Ohm  says. 

The  government  says  the  data  from  the  use  of  the  stingray  has  been  deleted  and  isn't  available 
to  the  defendant.  In  a statement,  the  FBI  told  the  Journal  that  "our  policy  since  the  1990s  has 
been  to  purge  or  'expunge'  all  information  obtained  during  a location  operation"  when  using 
stingray-type  gear. 

As  a general  matter,  Ms.  Sabol  says,  court  orders  related  to  stingray  technology  "will  include  a 
directive  to  expunge  information  at  the  end  of  the  location  operation." 

Ms.  Sabol  says  the  FBI  follows  this  policy  because  ite  intent  isn't  to  use  the  data  as  evidence  in 
court,  but  rather  to  simply  find  the  "general  location  of  their  subject"  in  order  to  start  collecting 
other  information  that  can  be  used  to  justify  a physical  search  of  the  premises. 

In  the  Rigmaiden  example,  investigators  used  the  stingray  to  narrow  down  the  location  of  the 
broadband  card.  Then  they  went  to  the  aparbnent  complex's  office  arto  learned  that  one  resident 
had  used  a feise  ID  and  a feke  tax  return  on  the  renter's  application,  according  to  court 
documents. 

Based  on  that  evidence,  toey  obtained  a search  warrant  for  the  apartment.  They  found  the 
broadband  card  connected  to  a computer. 

- Mr.  Rigmaiden,  who  doesn't  confirm  or  d^y  ownership  of  the  broadband  card,  is  arguing  he 
should  be  given  information  about  the  device  and  about  other  aspects  of  the  mission  that  located 
him. 

In  the  February  hearing,  Judge  Campbell  said  he  might  need  to  weigh  the  government's  dalm  of 
privilege  against  the  defendant's  Fourth  Amendment  rights,  and  asked  the  prosecution,  "How 
can  we  litigate  in  this  case  whether  this  technology  that  was  used  in  this  case  violates  the  Fourth 
Amendment  without  knowing  precisely  what  it  can  do?" 

Write  to  Jennifer  Valentlno-DeVrtes  at  Jennifer.Valentino-DeVries@wsj.com 
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